Files
WP-LIT-MCP/src/Abilities/Rollback.php
T
janniclas.loosenandClaude Opus 5.5 b24eb6c3e9 fix(security): no direct HTTP access to plugin PHP files (audit L2, cheap part)
Every file under src/ exits outside WordPress (defined('ABSPATH') ||
exit; after the use block, so a direct request no longer prints a fatal
error with the server path); divi-convert-fixture.php gets the WP_CLI
guard the other integration scripts have. A unit test keeps both true;
PSR1 side-effects warning excluded for the guard.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7
2026-09-26 19:32:12 +02:00

36 lines
897 B
PHP

<?php
declare(strict_types=1);
namespace LIT\MCP\Abilities;
use Throwable;
defined('ABSPATH') || exit;
/**
* Runs the undo steps of a failed write. Every step runs, even after an earlier one failed;
* a step fails by throwing. The caller turns the collected messages into the log detail and
* picks WriteFailed::rolledBack() (no failures) or WriteFailed::partial().
*/
final class Rollback
{
/**
* @param callable(): mixed ...$steps In the order they must run.
* @return list<string> The messages of the steps that threw, in step order. Never throws.
*/
public static function attempt(callable ...$steps): array
{
$failures = [];
foreach ($steps as $step) {
try {
$step();
} catch (Throwable $e) {
$failures[] = $e->getMessage();
}
}
return $failures;
}
}